| issue with fine grain policies [message #10904] |
Mon, 23 February 2004 06:15  |
Bharath Kumar
Messages: 11
Registered: February 2004
|
Junior Member |
|
|
Hi ,
We recently upgraded to oracle 9i and all the packages related fine grain was recompiled .
When we are doing exchage partition on a table which as finegrain was failing with the following error . We are doing this exchage partition with schema owner .
ORA-14136 ALTER TABLE EXCHANGE restricted by fine-grained security
Cause: User doing exchange does not have full table access due to VPD policies.
Action: Grant exempt priviliges to this user.
Thanks ,
PBK
|
|
|
|
| Re: issue with fine grain policies [message #10940 is a reply to message #10904] |
Wed, 25 February 2004 01:55  |
Frank Naude
Messages: 4587
Registered: April 1998
|
Senior Member |
|
|
Hi,
See chapter 7 of the "Oracle Label Security Administrator's Guide":
Similarly, database users granted the Oracle9i EXEMPT ACCESS POLICY privilege, either directly or through a database role, are completely exempt from Oracle Label Security enforcement--regardless of the export mode, application or utility used to extract data from the database. This is a very powerful privilege and should be carefully managed."
Thus, the following should work:
SQL> GRANT EXEMPT ACCESS POLICY TO SCOTT;
-- do your worst...
SQL> ALTER TABLE EXCHANGE...
SQL> REVOKE EXEMPT ACCESS POLICY FROM SCOTT;
Best regards.
Frank
|
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
